Privacy Policy

ManaDuitnya is a bill-splitting, invoicing, and QRIS payment collection service, moving toward a full B2B toolkit. ManaDuitnya is built and maintained by KalaBaru Creatives (kalabaru.id). We collect only what the service needs to operate, and we explain exactly what that is below. This policy is effective for this service.

Information we collect

By default, ManaDuitnya does not collect any personal information or enforce any data collection. When you register an account, we collect the following:

  • Account info: your name and email, and any avatar image you choose to upload.
  • Bills, invoices, and their contents: line items, amounts, and any third-party details you enter yourself, such as a client or vendor's name, address, phone number, email, or company/VAT information on an invoice. We collect this because you choose to enter it to generate a document — we do not solicit it directly from the people you bill.
  • Inventory: product names, prices, and private notes you save to speed up future invoices.
  • QRIS payment sessions: the amount, status, timestamps, and — only if you turn them on for a given checkout link — payer-provided name, phone, email, or note.
  • Uploaded assets: your logo, signature image, and avatar, stored as part of your account so they can appear on your documents.
  • Technical and usage diagnostics (for example: IP address, browser user-agent, error logs, and basic usage events) to help operate and improve the service.

How we use your information

Collected data is used solely for internal diagnostics, analytics, service operation, and to respond to user requests. We do not use your personal data for marketing or sell it to third parties. Third-party services may use the data collected by ManaDuitnya as part of their own service-providing nature.

Third parties and analytics

Where necessary we may use third-party service providers (for example hosting or analytics providers). This includes, but is not limited to, services provided by:

  • Cloudflare
  • Umami
  • Google Fonts
  • fawazahmed0/exchange-api (via https://cdn.jsdelivr.net/npm/@fawazahmed0/currency-api@{date}/{apiVersion}/{endpoint})

Any data shared with such providers is limited to what is required for them to perform their service and is handled under appropriate agreements. Analytics are used in aggregated or pseudonymized form when possible.

QRIS payments

ManaDuitnya's QRIS checkout links let you collect payments using your own registered static QRIS. ManaDuitnya is not a licensed payment institution and does not hold or move funds itself — it provides the checkout session UI and reads the payment status you or your payer report. Funds move directly through Indonesia's QRIS payment rail and your own bank or e-wallet provider, subject to their own terms and privacy practices.

Retention and deletion

We retain your information only as long as necessary to provide the service and for legitimate diagnostic or legal needs. You can request full, permanent deletion ("hard delete") of your account and all associated data — including bills, invoices, inventory, and QRIS session records tied to your account. To do this, use the account deletion option in the app (if available) or contact us through the app's support flow.

Security

We take reasonable technical and organizational measures to protect your information, but no system is completely secure. Please contact us if you suspect any security issue.

Changes to this policy

This policy may be updated occasionally. We will post changes here with an updated effective date. Continued use of the service after changes indicates acceptance.

Effective date: 2026-08-02